Art. 13 of EU Regulation 2016/679 General Data Protection Regulation
A) Who processes your personal data?
SG Factoring S.p.A., with registered office in Milan – Via Antonio Tolomeo Trivulzio n°7 Tax Code and entry in the Register of Companies of Milan under No. 1264395, VAT No. 09047470159 (the “Company”) is the company, which, as Data Controller, collect and processes your personal data in accordance with EU Regulation 2016/679 General Data Protection Regulation (the “Regulation”) and provides you with the following information.
B) Why do we process your data?
The data you provide by filling in the “Contract” form on the SG Factoring S.p.A. website are required in order for us to respond to your request for information and, if the case may be, contact you.
C) Is your consent necessary?
Your consent is not necessary for us to be able to manage your information request pursuant to art. 6, lett. b) of the Regulation.
D) Is the requested data necessary?
We ask you to provide all the data requested as “mandatory” (*) because they are necessary for your request to be sent and enables us to handle it better. The failure to fill in data indicated as “optional” does not have any repercussions.
E) How do we process your data?
Your data will for the most part be processed using IT tools in order to manage your request and, if necessary, to get back in touch with you.
The data shall always be processed in compliance with current regulations and, in any case, in such a way as to guarantee their security and confidentiality and avoid their unauthorised dissemination or use, alteration or destruction.
F) How long do we keep your data?
Your data will be processed for the time required to handle your request correctly and shall be kept on file in order to help us improve our service; in particular the data shall be kept for a maximum of 24 months and shall subsequently be erased or retained in an anonymous or aggregate form.
G) Who are the recipients of your data?
Your data will not be disseminated and shall only become known to persons authorised to the processing in the Company’s Department interested in your request, so that they may handle your request. They may also be passed on to the company responsible for the management of our website and our computer archives, who shall act as an external data processor.
The names of all external data processors may be requested by sending a communication to the contact details provided below.
H) What are your rights?
By sending a communication to email@example.com you can at any time exercise the rights1 of articles 15 to 22 of the Regulation, including obtaining access to your personal data, correction of inaccurate personal data or deletion or restriction thereof, requesting to receive your data or transmit it to another data controller, in a structured, commonly used format that can be read by automatic device.
K) Who can be contacted to lodge a complaint?
Should you consider the processing of your data infringes the Regulation, you may in any event lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), or, if different, to the Data Protection Authority of the Member State of your habitual residence, place of work or place of the alleged infringement.
L) How can the data protection officer be contacted?
The Data Protection Officer appointed can be contacted at the e-mail address: firstname.lastname@example.org
¹ Articles 15 to 22 of the Regulation recognise specific rights including:
- Obtaining confirmation that processing of personal data is or is not in progress
- Obtaining access to personal data and information indicated in Art. 15 of the Regulation
- Correcting personal data, if inaccurate, without unjustified delay or the integration of incomplete personal data
- Deleting personal data without undue delay
- Restricting the processing of your personal data
- Being informed of any correction, deletion or restriction of the processing performed in relation to personal data
- Receiving personal data in a structured, commonly used form that can be read by an automatic device
- Opposing the processing of personal data, at any time, for reasons connected to your particular situation
In particular, it is understood that you may withdraw the consent to any processing provided and to oppose our analysis activities at any time.
Furthermore, pursuant to art. 21 of the Regulation, you have the right to oppose the processing of any personal data that concerns you, at any time, for reasons connected to your own particular situation, that are carried out while pursuing the legitimate interests of the data controller pursuant to art. 6, paragraph 1, lett. f) of the Regulation.